Docker Security

  1. Securing the Host System
    1. Host Operating System Security
      1. Choosing a Hardened OS
        1. OS Hardening Guidelines
          1. Disabling Unnecessary Services
            1. Host Firewall Configuration
              1. System Updates and Patching
              2. Host Kernel Hardening
                1. Using a Container-Optimized OS
                  1. Features of Container-Optimized OSes
                    1. Performance and Security Benefits
                    2. Regular Kernel Patching and Updates
                      1. Patch Management Strategies
                        1. Automated Update Tools
                          1. Testing and Validation
                          2. Kernel Security Modules
                            1. AppArmor
                              1. Profile Management
                                1. Policy Enforcement
                                  1. Custom Profile Creation
                                  2. SELinux
                                    1. Modes and Configuration
                                      1. Policy Types
                                        1. Troubleshooting SELinux Issues
                                        2. Seccomp
                                          1. Default vs Custom Profiles
                                            1. System Call Filtering
                                              1. Profile Development
                                          2. User Access Control on the Host
                                            1. Managing the Docker Group
                                              1. Risks of Group Membership
                                                1. Best Practices for Group Management
                                                  1. Alternative Access Methods
                                                  2. Rootless Mode for Docker
                                                    1. Benefits and Limitations
                                                      1. Configuration Steps
                                                        1. Troubleshooting Rootless Mode
                                                        2. Sudo Configuration for Docker
                                                          1. Restricted Sudo Access
                                                            1. Command Limitations
                                                              1. Audit Trail Management
                                                            2. Host Vulnerability Scanning
                                                              1. Host-Based Security Scanners
                                                                1. Integrating Scanning into Maintenance Routines
                                                                  1. Vulnerability Assessment Tools
                                                                    1. Remediation Planning

                                                                  Previous

                                                                  1. Introduction to Container Security

                                                                  Go to top

                                                                  Next

                                                                  3. Hardening the Docker Daemon